Changelog for memcached-1.6.7-3.1.x86_64.rpm :

* Mon Sep 28 2020 Dirk Mueller - update to 1.6.7:
* Dockerfile - allow override of config opts
* Improve page balancing when writes are bursty
* main: split binary protocol into proto_bin.c
* main: split text protocol into proto_text.c
* add openssl errors to SSL certificate loading error messages
* skip setting the resource limits in debug builds
* Use signal function instead of sigignore
* fixing the basic tls test so it exits correctly when fails
* net: remove most response obj cache related code
* net: carve response buffers from read buffers
* Do not join lru and slab maintainer threads if they do not exist
* Restore SAN entries in testing TLS certificates
* Changed code using strtol to use safe_strtol wrapper
* Fix TCP failure under OS X.- drop use-signal-function-instead-of-sigignore.patch (upstream)
* Tue Sep 01 2020 Callum Farmer - Add use-signal-function-instead-of-sigignore.patch: sigignore causes deprecation errors(gh#memcached/memcached#691)
* Sat Jun 06 2020 Andreas Stieger - update to 1.6.6:
* Fix crash on shutdown when handling signals with TLS enabled
* Disable aarch64 hw crc32 function for now
* Pull in BigEndian-compatible crc32c
* minimum libevent version is 2.x
* Mon Apr 13 2020 Marcus Rueckert - update to version 1.6.5 https://github.com/memcached/memcached/wiki/ReleaseNotes165- drop link_sasl.patch issue is fixed- dropped 635.patch and 634.patch: in 1.6.5 release
* Mon Apr 13 2020 Marcus Rueckert - update to version 1.6.4 https://github.com/memcached/memcached/wiki/ReleaseNotes163 https://github.com/memcached/memcached/wiki/ReleaseNotes164- drop patches as they are included in the update: https://github.com/memcached/memcached/pull/634 https://github.com/memcached/memcached/pull/635- added link_sasl.patch: it seems libsasl2 wasnt linked which lead to undefined references
* Wed Apr 01 2020 Marcus Rueckert - disable extstore also on ppc(64)
* Wed Apr 01 2020 Marcus Rueckert - apply patch from https://github.com/memcached/memcached/pull/634 fix building with LTO and also building with -fno-common. (634.patch)
* Thu Mar 26 2020 Marcus Rueckert - apply patch from https://github.com/memcached/memcached/pull/635 to fix crashes we saw during the testsuite (635.patch)- disable extstore on s390 for now as there are known bugs on that platform
* Tue Mar 24 2020 Marcus Rueckert - limit tls support to 15 and above
* Tue Mar 24 2020 Marcus Rueckert - disable lto until the 2 settings structs are resolved
* Tue Mar 24 2020 Marcus Rueckert - update to version 1.6.2 (boo# 1167522) CVE-2020-10931 https://github.com/memcached/memcached/wiki/ReleaseNotes162 https://github.com/memcached/memcached/wiki/ReleaseNotes161 https://github.com/memcached/memcached/wiki/ReleaseNotes160 https://github.com/memcached/memcached/wiki/ReleaseNotes1522 https://github.com/memcached/memcached/wiki/ReleaseNotes1521 https://github.com/memcached/memcached/wiki/ReleaseNotes1520 https://github.com/memcached/memcached/wiki/ReleaseNotes1519 https://github.com/memcached/memcached/wiki/ReleaseNotes1518- dropped all patches after reviewing with upstream: memcached-1.4.5.dif memcached-autofoo.patch memcached-use-endian_h.patch- enable TLS support (new BR: openssl-devel perl-IO-Socket-SSL perl-Net-SSLeay)
* Tue Sep 03 2019 pgajdosAATTsuse.com- version update to 1.5.17
* bugfixes fix strncpy call in stats conns to avoid ASAN violation extstore: fix indentation add error handling when calling dup function add unlock when item_cachedump malloc failed extstore: emulate pread(v) for macOS fix off-by-one in logger to allow CAS commands to be logged. use strdup for explicitly configured slab sizes move mem_requested from slabs.c to items.c (internal cleanup)
* new features add server address to the \"stats conns\" output log client connection id with fetchers and mutations Add a handler for seccomp crashes- version update to 1.5.16
* bugfixes When nsuffix is 0 space for flags hasn\'t been allocated so don\'t memcpy them.- version update to 1.5.15
* bugfixes Speed up incr/decr by replacing snprintf. Use correct buffer size for internal URI encoding. change some links from http to https Fix small memory leak in testapp.c. free window_global in slab_automove_extstore.c remove inline_ascii_response option - Y [filename] for ascii authentication mode fix: idle-timeout wasn\'t compatible with binprot
* features - Y [authfile] enables an authentication mode for ASCII protocol.- modified patches % memcached-autofoo.patch (refreshed)
* Thu May 02 2019 pgajdosAATTsuse.com- version update to 1.5.14
* update -h output for -I (max item size)
* fix segfault in \"lru\" command
* fix compile error on centos7
* extstore: error adjusting page_size after ext_path
* extstore: fix segfault if page_count is too high.
* close delete + incr item survival race bug
* memcached-tool dump fix loss of exp value
* Fix \"qw\" in \"MemcachedTest.pm\" so wait_ext_flush is exported properly
* Experimental TLS support.
* Basic implementation of TLS for memcached.
* Improve Get And Touch documentation
* fix INCR/DECR refcount leak for invalid items- modified patches % memcached-autofoo.patch (refreshed)
* Wed Oct 17 2018 Nicolas Bock - Version bump to 1.5.11:
* extstore: balance IO thread queues- Drop memcached-fix_test.patch that is present now upstream
* Wed Oct 03 2018 Guillaume GARDET - Add patch to fix aarch64, ppc64
* and s390x tests:
* memcached-fix_test.patch
* Fri Aug 17 2018 nicolas.bockAATTsuse.com- Fix linter errors regarding COPYING
* Mon Aug 13 2018 astiegerAATTsuse.com- update to 1.5.10:
* disruptive change in extstore: -o ext_page_count= is deprecated and no longer works. To specify size: -o ext_path=/d/m/e:500G extstore figures out the page count based on your desired page size. M|G|T|P supported.
* extstore: Add basic JBOD support: ext_path can be specified multiple times for striping onto simimar devices
* fix alignment issues on some ARM platforms for chunked items
* Sun Jul 08 2018 alexander_naumovAATTopensuse.org- Update to 1.5.9:
* Bugfix release.
* Important note: if using --enable-seccomp, privilege dropping is no longer on by default. The feature is experimental and many users are reporting hard to diagnose problems on varied platforms.
* Seccomp is now marked EXPERIMENTAL, and must be explicitly enabled by adding -o drop_privileges. Once we\'re more confident with the usability of the feature, it will be enabled in -o modern, like any other new change. You should only use it if you are willing to carefully test it, especially if you\'re a vendor or distribution.
* Also important is a crash fix in extstore when using the ASCII protocol, large items, and running low on memory.
* Fri Jul 06 2018 astiegerAATTsuse.com- update to 1.5.8:
* Bugfixes for seccomp and extstore
* Extstore platform portability has been greatly improved for ARM and 32bit systems- includes changes from 1.5.7:
* Fix alignment issues for 64bit ARM processors
* Fix seccomp portability
* Fix refcount leak with extstore while using binary touch commands
* Wed Apr 18 2018 pgajdosAATTsuse.com- turn on the testsuite again, it seems to pass server side, too
* Thu Apr 05 2018 sfleesAATTsuse.de- Home directory shouldn\'t be world readable bsc#1077718- Mention that this stream isn\'t affected by bsc#1085209, CVE-2018-1000127 to make the checker bots happy.
* Fri Mar 09 2018 dmuellerAATTsuse.com- update to 1.5.6 (bsc#1083903, CVE-2018-1000115):
* This update disables UDP by default to reduce DDoS amplification attacks
* see https://github.com/memcached/memcached/wiki/ReleaseNotes156
* see https://github.com/memcached/memcached/wiki/ReleaseNotes155
* see https://github.com/memcached/memcached/wiki/ReleaseNotes154
* see https://github.com/memcached/memcached/wiki/ReleaseNotes153
* see https://github.com/memcached/memcached/wiki/ReleaseNotes152
* see https://github.com/memcached/memcached/wiki/ReleaseNotes151
* see https://github.com/memcached/memcached/wiki/ReleaseNotes150
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Fri Sep 01 2017 tbechtoldAATTsuse.com- update to 1.4.39: https://github.com/memcached/memcached/wiki/ReleaseNotes1439 (bsc#1056865) (CVE-2017-9951) https://github.com/memcached/memcached/wiki/ReleaseNotes1438 https://github.com/memcached/memcached/wiki/ReleaseNotes1437 https://github.com/memcached/memcached/wiki/ReleaseNotes1436 https://github.com/memcached/memcached/wiki/ReleaseNotes1435 https://github.com/memcached/memcached/wiki/ReleaseNotes1434
* Thu Mar 23 2017 mchandrasAATTsuse.de- Use the MEMCACHED_USER variable from the /etc/sysconfig/memcached file to determine the user for the memcached process instead of hardcoding it in the service file.
* Mon Nov 07 2016 mrueckertAATTsuse.de- update to 1.4.33 https://github.com/memcached/memcached/wiki/ReleaseNotes1433 https://github.com/memcached/memcached/wiki/ReleaseNotes1432 https://github.com/memcached/memcached/wiki/ReleaseNotes1431 https://github.com/memcached/memcached/wiki/ReleaseNotes1430 https://github.com/memcached/memcached/wiki/ReleaseNotes1429 https://github.com/memcached/memcached/wiki/ReleaseNotes1428 https://github.com/memcached/memcached/wiki/ReleaseNotes1427 https://github.com/memcached/memcached/wiki/ReleaseNotes1426 (bsc #1007871) (CVE-2016-8704) (bsc #1007870) (CVE-2016-8705) (bsc #1007869) (CVE-2016-8706)- refreshed patches to apply cleanly again: memcached-1.4.5.dif memcached-autofoo.patch memcached-use-endian_h.patch
* Tue Dec 01 2015 p.drouandAATTgmail.com- Update to version 1.4.25:
* Please read the news at https://github.com/memcached/memcached/wiki/ReleaseNotes1425- Update memcached-autofoo.patch
* Mon Jun 15 2015 mrueckertAATTsuse.de- fix comment in the sysconfig file
* Sun Feb 22 2015 mpluskalAATTsuse.com- Cleanup spec file
* using spec-cleaner
* remove unnecessary %defines- Create new package (devel)- Install either init script or unit file- Refresh dependencies- Update to 1.4.22
* gatkq: return key in response
* Handle SIGTERM the same as SIGINT
* Fix off-by-one causing segfault in lru_crawler
* Fix potential corruption for incr/decr of 0b items
* Fix issue #369 - uninitialized stats_lock
* issue#370 : slab re-balance is not thread-safe in function do_item_get
* Fix potential corruption in hash table expansion
* use item lock instead of global lock when hash expanding
* fix hang when lru crawler started from commandline
* rename thread_init to avoid runtime failure on AIX
* Support -V (version option)- Changes for 1.4.21
* makefile cleanups
* Avoid OOM errors when locked items stuck in tail
* Sun Nov 09 2014 Led - fix bashisms in pre script
* Mon Jun 23 2014 andreas.stiegerAATTgmx.de- fix source URL
* Mon Jun 16 2014 mrueckertAATTsuse.de- disable testsuite. passes with chroot build but fails on server side build
* Mon Jun 16 2014 mrueckertAATTsuse.de- Bumping to latest version to include all fixes for: bnc#858677 CVE-2013-7290 bnc#858676 CVE-2013-7291 bnc#857188 CVE-2013-7239 bnc#817781 CVE-2011-4971 bnc#798458 CVE-2013-0179- update to 1.4.20 - Fix a race condition causing new connections to appear closed, causing an inifinte loop.- additional changes from 1.4.19 - Fix endianness detection during configure. - Fixes a performance regression with binary protocol (up to 20%) - Fix rare segfault in incr/decr. - disable tail_repair_time by default. - Likely not needed anymore, and can rarely cause bugs. - use the right hashpower for the item_locks table. Small perf improvement. - Fix crash for LRU crawler while using lock elision (haswell+ processors)- additional changes from 1.4.18 - Fixes - fix LRU contention for first minute of uptime - This made some synthetic benchmarks look awful. - Make hash table algorithm selectable - Don\'t lose item_size_max units in command line - Add a \"stats conns\" command to show the states of open connections. - Allow caller-specific error text in binary protocol - Stop returning ASCII error messages to binary clients - Fix reference leak in binary protocol \"get\" and \"touch\" handlers - Fix reference leak in process_get_command() - New Features - New \"stats conns\" command, which will show you what currently open connections are up to, how idle they\'ve been, etc. - The jenkins hash was getting a little long in the tooth, and we might want to add specific hash algorithms for different platforms in the future. This makes it selectable in some sense. We\'ve initially added murmur3 hash to the lineup and that seems to run a tiny bit faster in some tests. -o hash_algorithm=murmur3 - A new background thread emerges! Currently experimental, so the syntax might change. If you run into bugs please let us know (though it\'s been testing fine in torture tests so far).- additional changes from 1.4.17 - Fixes - Fix potential segfault in incr/decr routine. - Fix potential unbounded key prints (leading to crashes in logging code) - Fix bug which allowed invalid SASL credentials to authenticate. - Fix udp mode when listening on ipv6 addresses. - Fix for incorrect length of initial value set via binary increment protocol. - New Features - Add linux accept4() support. Removes one syscall for each new tcp connection - scripts/memcached-tool gets \"settings\" and \"sizes\" commands. - Add parameter (-F) to disable flush_all. Useful if you never want to be able to run a full cache flush on production instances.- additional changes from 1.4.16 - Fixes - Builds on OS X Mavericks (with clang) - Add statistics for allocation failures - Issue 294 : Check for allocation failure - Make tail leak expiry time configurable (-o tail_repair_time=60) - Fix segfault on specially crafted packet. - Close connection on update_event error while parsing new commands - Don\'t truncate maxbytes stat from \'stats settings\' - Add the \"shutdown\" command to the server. This allows for better - automation - fix enable-sasl-pwdb - New Features Adjusting tail repair time: -o tail_repair_time=60 (in seconds)- dropped memcached-1.4.x_delete_verbose_mode_dos.patch: included upstream- freshed memcached-autofoo.patch
* Tue Jan 15 2013 mrueckertAATTsuse.de- added memcached-1.4.x_delete_verbose_mode_dos.patch (bnc#798458) DoS when printing out keys to be deleted in verbose mode Upstream bug 306 (CVE-2013-0179)
* Tue Nov 20 2012 dimstarAATTopensuse.org- Fix useradd invocation: -o is useless without -u and newer versions of pwdutils/shadowutils fail on this now.
* Wed Nov 07 2012 chrisAATTcomputersalat.de- update to version 1.4.15
* Add some mild thread documentation
* README.md was missing from dist tarball
* Issue 286 : --disable-coverage drops \"-pthread\" option
* Reduce odds of getting OOM errors in some odd cases- rebase use-endian_h, autofoo patch and 1.4.5.dif- fix build <= 1140
* export LIBEVENT_CFLAGS and LIBEVENT_LIBS so we dont need pkgconfig check for libevent on <= 1140
* Wed Nov 07 2012 mrueckertAATTsuse.de- fix build on older distros - memcached-autofoo.patch: removed no-dist-gzip dist-xz - added new conditional to guard all the systemd stuff and guarded the general bcond_without with an suse_version > 12.2 - export LIBEVENT_CFLAGS and LIBEVENT_LIBS so we dont need pkgconfig check for libevent on sles11 - use makeinstall instead of make_install
* Tue Aug 14 2012 crrodriguezAATTopensuse.org- Update to version 1.4.14
* Avoid race condition in test during pid creation by blind retrying
* Fixed issue with invalid binary protocol touch command expiration time- If the test suite fails, package must fail build.- Use byteswapping macros from endian.h and not some ad-hoc/slow function.- Add systemd units.
* Tue Apr 03 2012 tabrahamAATTnovell.com- removed fix-strict-aliasing.patch deprecated by this release- Update to version 1.4.13
* Fix inline issue with older compilers (gcc 4.2.2)
* Better detection of sasl_callback_ft- Changes from version 1.4.12 Fixes:
* fix glitch with flush_all (exptime)
* Skip SASL tests unless RUN_SASL_TESTS is defined.
* Look around for saslpasswd2 (typically not in the user\'s path).
* build fix: Define sasl_callback_ft on older versions of sasl.
* fix segfault when sending a zero byte command
* fix warning in UDP test
* properly detect GCC atomics
* tests: loop on short binary packet reads
* fix slabs_reassign tests on 32bit hosts- Changes from version 1.4.11 Fixes:
* bug237 : Don\'t compute incorrect argc for timedrun
* fix \'age\' stat for stats items
* binary deletes were not ticking stats counters
* Fix a race condition from 1.4.10 on item_remove
* close some idiotic race conditions
* initial slab automover
* slab reassignment
* clean do_item_get logic a bit. fix race.
* clean up the do_item_alloc logic
* shorten lock for item allocation more
* Fix to build with cyrus sasl 2.1.25 New features:
* Slab page reassignment and bug fixes over 1.4.10.- Changes from version 1.4.10 Fixes:
* Disable issue 140 \'s test.
* Push cache_lock deeper into item_alloc
* Use item partitioned lock for as much as possible
* Remove the depth search from item_alloc
* Move hash calls outside of cache_lock
* Use spinlocks for main cache lock
* Remove uncommon branch from asciiprot hot path
* Allow all tests to run as root New features:
* tested improvements in speed between 3 and 6 worker threads (-t 3 to -t 6) More than 6 reduced speed- Changes from version 1.4.9
* Add a systemd service file
* Fix some minor typos in the protocol doc
* Issue 224 - check retval of main event loop
* Fix -c so maxconns can be raised above default.- Changes from version 1.4.8 Fixes:
* Fix to write correct pid from start-memcached
* Fix to enable LRU when using binary protocol
* Upgrade stats items counters to 64bit
* Add new stats expired_unfetched, evicted_unfetched
* Allow setting initial size of the hash table
* Expose stats for the internal hash table
* bug220 : incr would sometimes return the previous item\'s CAS
* Fixed bug on multi get processing
* Experimental maxconns_fast option
* Add an ASCII touch command
* Add binary GATK/GATKQ
* Backport binary TOUCH/GAT/GATQ commands
* Issue 221 : Increment treats leading spaces as 0
* Fix compile error on OS X New features:
* touch commands
* fast connection limit handling
* internal hash table
* expored_unfetched, evicted_unfetched- Changes from version 1.4.7 Fixes:
* Use a monotonically increasing timer
* Immediately expire items when given a negative expiration time
* fix memcached-tool to print about all slabs
* Properly daemonize memcached for debian
* Don\'t permanently close UDP listeners on error
* Allow memcached-init to start multiple instances (not recommended)
* Issue 214 : Search for network libraries before searching for libevent
* Issue 213 : Search for clock_gettime in librt
* Issue 115 : accont for CAS in item_size_ok
* Fix incredibly slim race for maxconns handler. Should no longer hang ever
* Issue 183 - Reclaim items dead by flush_all
* Issue 200 : Don\'t fire dtrace probe as the last thing in a function New features:
* monotonic clock- Changes from version 1.4.6
* Gcc on Solaris sparc wants -R and not -rpath
* Issue 121 : Set the runtime path when --with-libevent is used
* Fix autogen failure when unable to find supported command.
* fix race crash for accepting new connections
* fix incr/decr race conditions for binary prot
* fix incr/decr race conditions for ASCII prot
* Compile fix (-Werror=unused-but-set-variable warnings)
* Bind each UDP socket to an a single worker thread in multiport env
* Add support for using multiple ports
* Issue 154 : pid file out of sync (created before socket binding)
* Issue 163 : Buggy mem_requested values
* Fix cross compilation issues in configure
* Issue 140 - Fix age for items stats
* Issue 131 - ChangeLog is outdated
* Issue 155 : bind to multiple interface
* Issue 161 incorrect allocation in cache_create
* Fix type-punning issues exposed with GCC 4.5.1
* Simplify stats aggregation code
* Reverse backward expected/actual params in test
* Issue 152 : Fix error message from mget
* Refuse to start if we detect libevent 1.12
* Fix compilation issue on Solaris 9 wrt isspace() macro - Resolves issue 111 New features:
* multiple port binding
* Fri May 27 2011 cooloAATTnovell.com- follow fedora\'s lead and remove Werror
* Thu May 06 2010 freitagAATTnovell.com- update to version 1.4.5: This is a maintenance release with some build fixes, doc fixes, and one new stat. Fixes:
* Properly detect CPU alignment on ARM. bug100
* Remove 1MB assertion. bug 119
* More automake versions supported.
* Compiler warning fixes for OpenBSD.
* potential buffer overflow in vperror
* Report errors opening pidfiles using vperror New Features::
* New stat: reclaimed
* sasl_pwdb for more simple auth deployments
* Fri Jun 05 2009 mrueckertAATTsuse.de- update to version 1.2.8: - make -b command actually work -
*critical bugfix
*. In 1.2.7 under multithreaded mode, memcached would never restart accepting connections after hitting the maximum connection limit. - remove \'stats maps\' command, as it is a potential information leak, usable if versions prior to 1.2.8 ever have buffer overflows discovered. (bnc#501656) CVE-2009-1494- additional changes from version 1.2.7 - reset new stats with \'stats reset\' - Slew of new tests. (misc, mostly Dustin Sallings) - Minor bug fixes. (misc, mostly Dustin Sallings, some Dormando) (see git history for full list) - -b command for setting the tcp listen backlog (Chris Goffinet) - Workaround for a more major bug that very rarely makes memcached stop allowing new data to be set. (Dormando) - Print why a key was expired in -vv mode (Dormando) - cmd_flush stat (Dormando) - listen_disabled_num stat for determining if you\'ve hit the maxconns limit (Dormando) - Display error status on listen failures (Dormando) - Remove managed instance code. Incomplete/etc. (Dormando) - Handle broken IPV6 stacks better (Brian Aker) - Generate warnings on setsockopt() failures (Brian Aker) - Fix some indentation issues (Brian Aker) - UDP/TCP can be disabled by setting their port to zero (Brian Aker) - Zero out libevent thread structures before use (Ricky Zhou) - New stat: Last accessed time for last evicted item per slab class. (Dormando) - Use a dedicated socket accept thread (Facebook) - Add -R option. Limit the number of requests processed by a connection at once. Prevents starving other threads if bulk loading. (Facebook)